Siemens Sm-2556 Firmware vulnerabilities

3 CVEs affecting Siemens Sm-2556 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-12739, published 2017-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-12739, published 2017-11-15. Critical severity, CVSS 9.8. EPSS: 5.6% chance of exploitation in the next 30 days. An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected…
CVE-2017-12737, published 2017-11-15. Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days. An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected…
CVE-2017-12738, published 2017-11-15. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected…